Sumo Logic offers cloud-native log analytics. Explore Sumo Logic Cloud Log Analytics, compare key features and see the top SIEM alternatives before you buy.
Security Operations
SIEM Software: Compare Security Information & Event Tools
Compare SIEM software for log management, threat detection and compliance reporting. Review data ingestion, correlation rules, analytics and pricing models side by side.
31 vendors66 products
See the Top 19 rankingSIEM vendors 31
Companies that offer SIEM.
Featured vendors
LogRhythm offers SIEM, log management and network monitoring. Explore LogRhythm Axon, compare key features and see the top SIEM alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
AWS
Seattle, Washington, USA
ConnectWise
Tampa, Florida, USA
CrowdStrike
Austin, Texas, USA
Databricks
San Francisco, California, USA
Devo
Cambridge, Massachusetts, USA
Elastic
Mountain View, California, USA
Exabeam
Foster City, California, USA
Fortinet
Sunnyvale, California, USA
Fortra
Eden Prairie, Minnesota, USA
Google Cloud
Mountain View, California, USA
Graylog
Houston, Texas, USA
Huntress
Ellicott City, Maryland, USA
IBM
Armonk, New York, USA
Juniper Networks
Sunnyvale, California, USA
LogRhythm
Boulder, Colorado, USA
ManageEngine
Chennai, India
Microsoft
Redmond, Washington, USA
Netwrix
Frisco, Texas, USA
OSSEC
Open-source project; global community
OpenText
Waterloo, Ontario, Canada
Palo Alto Networks
Santa Clara, California, USA
Qualys
Foster City, California, USA
Rapid7
Boston, Massachusetts, USA
Salesforce
San Francisco, California, USA
SIEM products 66
Open a product to see its features, pricing and reviews, or compare it with others.
Graylog Security
byGraylog
Graylog Security by Graylog: anomaly detection. Ideal for SIEM threat detection. Deployment: cloud, on-premises or hybrid. See how it compares with top SIEM alternatives.
Security OperationsView details
Huntress Managed SIEM
byHuntress
Looking for Managed SIEM software? Huntress Managed SIEM by Huntress provides managed 24/7 SIEM for Cloud Log Monitoring. Compare features and alternatives.
Security OperationsView details
IBM QRadar AI
byIBM
IBM QRadar AI from IBM focuses on alert prioritization. Key capabilities: security AI and SIEM. Compare it with the leading Security Operations alternatives.
Security OperationsView details
IBM QRadar EDR
byIBM
IBM QRadar EDR from IBM focuses on ransomware protection. Key capabilities: EDR, endpoint security and threat detection. Compare it with the leading EDR alternatives.
Endpoint SecurityView details
IBM QRadar SOAR
byIBM
IBM QRadar SOAR is a security orchestration and automation from IBM. Learn how it supports incident response, what features stand out and which SOAR tools compete.
Security OperationsView details
IBM Security QRadar SIEM
byIBM
IBM built IBM Security QRadar SIEM for threat detection. Explore SIEM, log management and security operations, review cloud deployment and compare similar SIEM products.
Security OperationsView details
Juniper Secure Analytics
Juniper Networks built Juniper Secure Analytics for incident triage. Explore asset profiling, review on-premises or cloud deployment and compare similar SIEM products.
Network SecurityView details
LogRhythm Axon
LogRhythm Axon by LogRhythm: intuitive search and cloud log parsing. Ideal for threat detection rules. Deployment: cloud. See how it compares with top SIEM alternatives.
Security OperationsView details
LogRhythm SIEM
LogRhythm SIEM covers embedded SOAR, forensic case management and compliance automation suites for centralized log management. Compare top SIEM tools.
Security OperationsView details
LogRhythm UEBA
Free trial available. LogRhythm UEBA by LogRhythm offers automated alerting and insider threat detection. Compare features, use cases and leading UEBA alternatives.
Security OperationsView details
ManageEngine EventLog Analyzer
ManageEngine EventLog Analyzer offers centralized log collection and real-time event correlation. Use it for SIEM log analytics. See SIEM alternatives.
Security OperationsView details
Microsoft Defender XDR
Microsoft Defender XDR covers cross-domain correlation, incident management and automated investigation for SOC operations and incident response. Compare top XDR tools.
Endpoint SecurityView details
Microsoft Defender for Endpoint
Microsoft built Microsoft Defender for Endpoint for endpoint protection. Explore EDR, review cloud deployment and compare similar Endpoint Security products.
Network SecurityView details
Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM. It helps with SOC operations through SIEM, data lake and analytics rules. Explore features and compare SIEM alternatives.
Security OperationsView details
Netwrix Change Tracker
byNetwrix
Netwrix Change Tracker: tamper detection and CIS benchmark auditing. Built for system hardening verification. Compare File Integrity Monitoring alternatives.
Endpoint SecurityView details
OSSEC
byOSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.
Endpoint SecurityView details
OpenText ArcSight
byOpenText
Evaluating OpenText ArcSight? See how this SIEM tool handles real-time event correlation and CEF log normalization, where it fits best and which alternatives to compare.
Security OperationsView details
OpenText ArcSight Enterprise Security Manager
byOpenText
OpenText ArcSight Enterprise Security Manager: sub-second event correlation and stateful correlation rules. Built for SOC triage automation. Compare SIEM alternatives.
Security OperationsView details
Palo Alto Cortex XSIAM
Palo Alto Cortex XSIAM covers security data lake ingestion and precision AI alert correlation for next-generation SIEM replacement. Compare top Security Operations tools.
Endpoint SecurityView details
Qualys File Integrity Monitoring
byQualys
Qualys File Integrity Monitoring covers file integrity monitoring and real-time change detection for compliance proof. Compare top File Integrity Monitoring tools.
Endpoint SecurityView details
Rapid7 InsightIDR
byRapid7
Rapid7 InsightIDR is a cloud-native SIEM & extended detection and response for centralized log auditing and lateral movement tracking. See features and SIEM alternatives.
Endpoint SecurityView details
Salesforce Event Monitoring
Get the facts on Salesforce Event Monitoring: audit export and anomaly detection. Built for Security Monitoring. Compare it with other SIEM options before you decide.
Data Security & PrivacyView details
Securonix UEBA
Evaluating Securonix UEBA? See how this UEBA tool handles dynamic behavioral baselining and peer group modeling, where it fits best and which alternatives to compare.
Security OperationsView details
Securonix Unified Defense SIEM
Get the facts on Securonix Unified Defense SIEM: automated SOAR playbooks. Built for cloud threat detection. Compare it with other SIEM options before you decide.
Security OperationsView details
Showing page 2 of 3 (66 products)